Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filtersJenkins OpenShift Login Plugin session fixation vulnerability
Jenkins mabl Plugin missing permission check
Jenkins Orka by MacStadium Plugin missing permission check
Jenkins Active Directory Plugin vulnerable to Active Directory credential disclosure
Jenkins mabl Plugin vulnerable to cross-site request forgery
Apache Pulsar Function Worker Incorrect Authorization vulnerability
XWiki Platform vulnerable to cross-site request forgery (CSRF) via the REST API
Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations
Apache MINA SSHD information disclosure vulnerability
Apache RocketMQ may have remote code execution vulnerability when using update configuration function
Graylog server has partial path traversal vulnerability in Support Bundle feature
Graylog vulnerable to insecure source port usage for DNS queries
Graylog user session is still usable after logout
Apache Linkis Authentication Bypass vulnerability
Bouncy Castle For Java LDAP injection vulnerability
Upgrading doesn't prevent exploiting vulnerable XWiki documents
XWiki Platform vulnerable to Code injection through NotificationRSSService
XWiki Platform vulnerable to Code Injection in icon themes
XWiki Platform vulnerable to persistent Cross-site Scripting through CKEditor Configuration pages
Keycloak vulnerable to Improper Client Certificate Validation for OAuth/OpenID clients
Keycloak Untrusted Certificate Validation vulnerability
Client Spoofing within the Keycloak Device Authorisation Grant
FastAsyncWorldEdit vulnerable to Uncontrolled Resource Consumption
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.